This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/D11NIVjANkynDLC7lwNSF6fXqaU.roa File: D11NIVjANkynDLC7lwNSF6fXqaU.roa (raw, json) Hash identifier: Zla5j0Z/xfU+ib+S/9NIECkpmWe63xOzeC/VsXKN7hs= Subject key identifier: 0F:5D:4D:21:58:C0:36:4C:A7:0C:B0:BB:97:03:52:17:A7:D7:A9:A5 Certificate issuer: /CN=4b57a39db5c7aa36be82cd751e50cb9023033dca Certificate serial: 019B7A5B99C9CC661CA67BCE9085D77166C3 Authority key identifier: 4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/D11NIVjANkynDLC7lwNSF6fXqaU.roa Signing time: Thu 01 Jan 2026 16:19:41 +0000 ROA not before: Thu 01 Jan 2026 16:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51088 IP address blocks: 193.39.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.mft rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:99:c9:cc:66:1c:a6:7b:ce:90:85:d7:71:66:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b57a39db5c7aa36be82cd751e50cb9023033dca Validity Not Before: Jan 1 16:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f5d4d2158c0364ca70cb0bb97035217a7d7a9a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9c:9c:dc:dc:f5:2d:a6:fb:db:1b:60:3e:f8: 38:55:8e:91:82:e6:d5:d1:03:7f:db:49:00:38:8c: b2:34:29:c4:55:8e:b9:d8:e4:a9:b9:0f:ee:f7:3d: a3:00:7b:5f:ef:b4:d1:39:fd:c2:ce:7f:ba:cd:57: 58:35:c6:41:44:ad:15:7d:09:7c:b1:cb:ce:7f:d5: c5:31:65:71:99:59:a8:59:7e:1b:58:ed:66:fa:9d: 08:8e:06:ff:a7:71:73:5e:d7:8a:07:b1:50:fd:6f: 14:ba:bb:6a:be:14:5c:3b:49:d5:d7:32:08:73:b1: 1b:af:f0:79:b4:a6:be:f0:f4:6b:22:83:d7:48:e8: e6:5e:ab:f1:4d:ec:50:cc:eb:8d:0a:45:9e:48:b4: 98:58:ed:52:ed:66:84:2b:05:a9:e3:a1:2d:81:bb: 0f:bd:b8:ae:34:77:26:4a:be:30:11:85:6e:04:51: 07:56:62:65:22:01:f6:d5:6e:58:e1:08:44:ed:1a: bc:72:98:0c:3a:e0:e8:ad:70:0f:b4:cf:a2:a6:b7: e7:49:21:fb:6d:8c:86:f3:06:d1:33:69:4f:ce:3b: 2c:8c:f6:70:ce:5f:a1:f6:e5:74:ba:9a:12:40:d1: 3f:69:b0:3e:b0:27:d6:e6:21:9b:b2:2e:1b:06:cf: ee:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5D:4D:21:58:C0:36:4C:A7:0C:B0:BB:97:03:52:17:A7:D7:A9:A5 X509v3 Authority Key Identifier: keyid:4B:57:A3:9D:B5:C7:AA:36:BE:82:CD:75:1E:50:CB:90:23:03:3D:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1ejnbXHqja-gs11HlDLkCMDPco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/D11NIVjANkynDLC7lwNSF6fXqaU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7a69b5-2bfb-481a-b3fb-b3d1896f369f/1/S1ejnbXHqja-gs11HlDLkCMDPco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.39.250.0/24 Signature Algorithm: sha256WithRSAEncryption 44:b7:97:c7:17:a3:35:2b:9f:2d:e1:16:51:83:68:94:bf:ec: 12:ef:0f:fb:00:c8:7e:e3:f8:9a:8b:ab:52:f2:5a:13:af:1c: 06:7a:f6:34:84:5b:e0:c8:5d:a1:63:44:ed:55:7c:34:01:20: 63:6c:79:c0:9e:73:81:8f:9b:69:4b:48:8a:f0:26:e6:01:5f: db:47:46:5a:be:18:50:13:98:4d:b8:bd:21:96:01:36:27:de: 9d:85:d0:25:74:07:18:94:82:ff:53:52:7e:3e:c2:f7:f6:2b: 8f:e4:93:4a:82:18:98:1f:00:26:16:80:9e:cc:32:fc:2a:a5: a0:f2:a7:4a:79:65:8b:c3:bc:d6:49:fe:ae:1c:df:73:a4:73: 17:e2:37:8f:c0:c8:2f:cc:bb:77:90:79:51:5b:45:f6:92:61: 6b:d2:23:d9:41:8f:18:f7:a7:ac:de:71:6c:b4:e0:0d:7b:0a: e9:c3:80:35:55:fc:c9:93:d9:3b:85:f0:84:38:95:be:f7:e6: 0b:59:16:35:4c:b7:1f:b2:e8:24:87:73:4f:03:5f:8b:6d:5c: c0:53:7a:59:1c:dc:dc:74:d7:e6:90:3e:f2:d0:3b:9b:87:cc: 00:a6:f1:cb:6c:2f:17:62:1c:6f:7f:19:45:2b:f6:de:8a:e8: d9:42:64:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W5nJzGYcpnvOkIXXcWbDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNTdhMzlkYjVjN2FhMzZiZTgyY2Q3NTFlNTBjYjkwMjMw MzNkY2EwHhcNMjYwMTAxMTYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjVkNGQyMTU4YzAzNjRjYTcwY2IwYmI5NzAzNTIxN2E3ZDdhOWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpyc3Nz1Lab72xtgPvg4VY6RgubV 0QN/20kAOIyyNCnEVY652OSpuQ/u9z2jAHtf77TROf3Czn+6zVdYNcZBRK0VfQl8 scvOf9XFMWVxmVmoWX4bWO1m+p0Ijgb/p3FzXteKB7FQ/W8UurtqvhRcO0nV1zII c7Ebr/B5tKa+8PRrIoPXSOjmXqvxTexQzOuNCkWeSLSYWO1S7WaEKwWp46EtgbsP vbiuNHcmSr4wEYVuBFEHVmJlIgH21W5Y4QhE7Rq8cpgMOuDorXAPtM+iprfnSSH7 bYyG8wbRM2lPzjssjPZwzl+h9uV0upoSQNE/abA+sCfW5iGbsi4bBs/u9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA9dTSFYwDZMpwywu5cDUhen16mlMB8GA1UdIwQY MBaAFEtXo521x6o2voLNdR5Qy5AjAz3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzFlam5iWEhxamEtZ3MxMUhsRExrQ01EUGNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83YTY5YjUtMmJmYi00ODFhLWIzZmIt YjNkMTg5NmYzNjlmLzEvRDExTklWakFOa3luRExDN2x3TlNGNmZYcWFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi83YTY5YjUtMmJmYi00ODFhLWIzZmItYjNkMTg5NmYzNjlm LzEvUzFlam5iWEhxamEtZ3MxMUhsRExrQ01EUGNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSf6MA0G CSqGSIb3DQEBCwUAA4IBAQBEt5fHF6M1K58t4RZRg2iUv+wS7w/7AMh+4/iai6tS 8loTrxwGevY0hFvgyF2hY0TtVXw0ASBjbHnAnnOBj5tpS0iK8CbmAV/bR0ZavhhQ E5hNuL0hlgE2J96dhdAldAcYlIL/U1J+PsL39iuP5JNKghiYHwAmFoCezDL8KqWg 8qdKeWWLw7zWSf6uHN9zpHMX4jePwMgvzLt3kHlRW0X2kmFr0iPZQY8Y96es3nFs tOANewrpw4A1VfzJk9k7hfCEOJW+9+YLWRY1TLcfsugkh3NPA1+LbVzAU3pZHNzc dNfmkD7y0Dubh8wApvHLbC8XYhxvfxlFK/beiujZQmRF -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:13 2026 by rpki-client